How to Reduce Supply Chain Risk: Lessons from Efforts to Block Huawei
summary
Panelists argue supply-chain risk is brutally practical: backdoors that lie dormant are extremely hard to detect, nation-states can implant hidden functionality, and removing one vendor doesn’t stop the threat. The Department of Defense is enforcing a ban and rolling out CMMC for continuous testing and certification; advocates push for a software bill of materials, independent testing, carrier transparency and factory access, warning that real security requires sustained funding and new engineering.
AI-written summary · about
chapters (36)
- 0:00Introduction
- 1:12Agenda
- 4:38Annie Bruce
- 6:24Katherine Waldron
- 10:01Can we build a reliable network
- 10:52How do you secure everything
- 12:49Is supply chain risk by country of origin
- 14:39Risk mitigation
- 15:54The risk isnt spying
- 17:19Backdoors
- 18:32Continuous Monitoring
- 19:56America is not ready
- 20:34Backdoors in supply chain
- 22:10Security vs Surveillance
- 23:14Cultural Shift in DoD
- 26:59Play Both Ways
- 27:32China Ignoring IP Law
- 28:05No cartons of the world
- 28:45Risk does not commute
- 29:19A plausible argument
- 29:48Why build a 5G network
- 30:19Objective criteria and testing
- 31:56Cybersecurity maturity model
- 33:16Testing and standards
- 35:11Independent testing
- 36:12Human technology
- 36:31Threelegged stool
- 38:44Security is an insurmountable problem
- 40:44Youre the supply chain
- 43:51What tools are there
- 44:33Are there resources out there
- 45:37Baking security protocols
- 48:57Innovation investments
- 52:04Holding the line
- 53:50We did the wrong thing
- 54:51China and 5G
related talks
48mCutting Through: Getting Real Answers on Supply Chain Security Policy
38mChallenge Accepted: 3 Experts, 3 Big Ideas on Supply Chain Security
25mYour Software Supply Chain is Only as Secure as its Weakest Link- 25mYour Software Supply Chain is Only as Secure as its Weakest Link
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain
54mSecuring the Digital Supply Chain: What we should do for Supply Chain Security in DevSecOps?
15mSupply chain security for dummies
49mMitigate Risks In Code: Protect Your Software based Supply Chain